Finding and Collecting

Protecting data is easier if you know where it is. It could reside in email, on external hard drives or in folders on your computer that have been saved over the years, sometimes many years. Some data (such as passwords) could also reside in cached web files. Doing a simple search using the computer's built-in search utility tool will not find all of these sensitive pieces of information if you don't know what exactly to search for.

Data Scanning

Scanning your computer for instances of sensitive data is a good idea for anyone who suspects that such data might be stored on a computer. This step is an important one when trying to find out what kinds of data you have.

MIT offers a scanning tool called Spirion (formerly Identity Finder), which is licensed for use by faculty and staff at MIT. It helps to find instances of data that could be sensitive. In particular it looks for passwords, credit card and bank account numbers, passport and driver's license numbers and Social Security numbers.

Before Collection

Whenever you are requesting or collecting data from a person or source, STOP and CONSIDER: Why do I need this info? Is it REQUIRED for this situation? Can I fulfill my purpose without it?